Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/BIpvVr2_8-b9EbflXNvQe_I-T7M.roa
File: BIpvVr2_8-b9EbflXNvQe_I-T7M.roa (raw, json)
Hash identifier: A3x8Hj4u1bCi4fHzLS8E/miEoORB8YnNMKPtK17FkdE=
Subject key identifier: 04:8A:6F:56:BD:BF:F3:E6:FD:11:B7:E5:5C:DB:D0:7B:F2:3E:4F:B3
Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Certificate serial: 0953
Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/BIpvVr2_8-b9EbflXNvQe_I-T7M.roa
Signing time: Tue 07 Jun 2022 02:13:15 +0000
ROA not before: Tue 07 Jun 2022 02:13:15 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 132369
IP address blocks: 45.127.216.0/22 maxlen: 24
210.16.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387 (0x953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Validity
Not Before: Jun 7 02:13:15 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=048A6F56BDBFF3E6FD11B7E55CDBD07BF23E4FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:89:b6:4b:be:4e:58:f5:d5:e8:95:05:ef:
2f:c7:85:3a:b6:6e:9d:47:5f:b1:aa:2a:30:bc:19:
21:ea:41:a4:be:c3:cc:4e:25:a7:d1:31:01:c7:78:
3f:20:4b:92:38:4e:a7:de:53:76:d4:d8:ec:3f:89:
c7:64:ed:ee:4c:b3:b7:75:a8:25:25:73:33:79:b2:
d7:df:84:33:aa:c7:bf:4e:29:56:6b:48:1a:64:3b:
7b:ab:d3:44:f4:58:52:d9:9c:88:e9:08:90:bb:99:
e6:4f:04:7d:8a:10:e1:dd:6a:66:be:02:0a:33:ec:
b8:61:4c:d9:1b:f6:fa:4b:1d:a5:8c:49:5c:68:f6:
87:59:7c:87:bb:c7:13:52:a8:3e:9d:33:97:60:45:
e6:eb:98:b4:fe:17:53:cb:46:10:0c:98:35:05:04:
ef:de:cb:52:6a:cd:7f:20:6d:df:8a:f5:55:8c:cf:
cb:5b:88:84:c5:1d:50:62:6f:65:d7:3c:62:82:4a:
b3:92:32:1a:d0:ce:b5:3c:c3:a6:0d:31:ad:46:8c:
5a:8b:74:7c:b9:eb:38:f1:09:84:34:64:3d:13:2b:
06:b5:38:1f:3e:9f:b8:2e:f2:f1:51:db:df:a1:15:
66:fe:06:4a:c5:87:62:0f:a5:fd:f5:5b:7c:6f:33:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8A:6F:56:BD:BF:F3:E6:FD:11:B7:E5:5C:DB:D0:7B:F2:3E:4F:B3
X509v3 Authority Key Identifier:
keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/BIpvVr2_8-b9EbflXNvQe_I-T7M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.216.0/22
210.16.104.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:1d:00:60:39:2c:22:c4:bb:a0:be:89:2c:9a:df:90:83:f7:
6c:8c:86:8a:7e:98:38:8f:2d:e5:ae:47:e2:12:bf:14:b2:f0:
f4:38:c0:11:2d:c2:ce:28:15:ae:bf:20:0e:0f:57:cc:49:ef:
95:05:34:84:4e:b4:19:6f:93:f4:e8:4d:cc:80:52:0c:5f:c5:
0e:6b:a2:1b:0d:13:69:fd:e1:be:a1:49:26:23:4b:18:c2:4c:
95:8f:ba:a5:c5:3d:b0:ff:de:1f:34:a2:5c:90:13:6f:ba:02:
54:25:a7:bc:b5:39:c9:e7:4c:ab:c0:43:c6:27:38:17:6d:08:
d5:b8:a9:90:c7:e0:02:49:7d:26:fe:04:47:0a:44:cd:b4:67:
d7:d7:76:a6:a2:07:98:d4:a2:be:07:3c:3a:86:35:ce:64:99:
be:a5:e6:3e:95:f9:7c:7d:2c:6b:f1:cc:14:1f:2c:c5:fc:a4:
2f:a3:f8:23:39:58:7f:47:13:75:87:d6:86:27:24:62:0d:25:
2c:3a:6c:20:93:11:8d:3f:80:ac:c6:68:45:d4:ef:d4:37:4e:
d4:68:28:79:ea:f8:33:b2:4c:3c:e7:92:ae:62:69:ff:72:f1:
91:33:61:fa:fe:d7:04:aa:7f:5f:8a:4d:e9:63:f1:ff:d3:79:
e5:12:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org